Lucene search
+L

1161 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 4:52 a.m.•20 views

CVE-2023-46084

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in bPlugins LLC Icons Font Loader allows SQL Injection.This issue affects Icons Font Loader: from n/a through 1.1.2...

8.8CVSS8.8AI score0.00544EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 4:41 a.m.•30 views

CVE-2023-48333

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pluggabl LLC Booster for WooCommerce.This issue affects Booster for WooCommerce: from n/a through 7.1.1...

6.5CVSS7.2AI score0.00593EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 4:36 a.m.•16 views

CVE-2023-41132

Missing Authorization vulnerability in ShapedPlugin LLC Category Slider for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Category Slider for WooCommerce: from n/a through 1.4.15...

4.3CVSS7.3AI score0.0047EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 2:18 a.m.•24 views

CVE-2023-51420

Improper Control of Generation of Code 'Code Injection' vulnerability in Soft8Soft LLC Verge3D Publishing and E-Commerce.This issue affects Verge3D Publishing and E-Commerce: from n/a through 4.5.2...

9.1CVSS8.1AI score0.00579EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 2:09 a.m.•15 views

CVE-2023-47184

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Proper Fraction LLC. Admin Bar & Dashboard Access Control plugin = 1.2.8 versions...

5.9CVSS5.8AI score0.00354EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2025/05/23 1:56 a.m.•16 views

CVE-2023-24006

Auth. admin+ Cross-Site Scripting XSS vulnerability in Link Software LLC WP Terms Popup plugin = 2.6.0 versions...

5.9CVSS5.9AI score0.00392EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 12:54 a.m.•14 views

CVE-2022-47152

Cross-Site Request Forgery CSRF vulnerability in Etison, LLC ClickFunnels plugin = 3.1.1 versions...

8.8CVSS7.1AI score0.00253EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/23 12:00 a.m.•4 views

CVE-2025-48241: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Soft8Soft LLC Verge3D verge3d allows Reflected XSS.This issue affects Verge3D: from n/a through = 4.9.3...

7.1CVSS5.8AI score0.00217EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 10:31 p.m.•18 views

CVE-2022-25154

A DLL hijacking vulnerability in Samsung portable SSD T5 PC software before 1.6.9 could allow a local attacker to escalate privileges. An attacker must already have user privileges on Windows 7, 10, or 11 to exploit this vulnerability...

7.3CVSS6.9AI score0.00239EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 9:45 p.m.•23 views

CVE-2022-47137

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WPManageNinja LLC Ninja Tables plugin = 4.3.4 versions...

5.9CVSS5.6AI score0.0042EPSS
SaveExploits0
CVE
CVE
•added 2025/05/19 7:06 p.m.•72 views

CVE-2025-39407

CVE-2025-39407: Reflected XSS in WordPress Memberpress plugin (Caseproof) affecting versions before 1.12.0. Root cause is improper input neutralization during web page generation. Impact includes potential data/ session exposure via attacker-controlled input; CVSS v3.1 base score 7.1 (HIGH), with...

7.1CVSS8.6AI score0.00224EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/05/19 6:55 p.m.•16 views

CVE-2025-39446 WordPress Booster Plus for WooCommerce plugin <= 7.2.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pluggabl LLC Booster Plus for WooCommerce allows Reflected XSS.This issue affects Booster Plus for WooCommerce: from n/a through 7.2.4...

7.1CVSS7AI score0.00228EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/05/19 6:55 p.m.•45 views

CVE-2025-39446 WordPress Booster Plus for WooCommerce plugin <= 7.2.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pluggabl LLC Booster Plus for WooCommerce allows Reflected XSS.This issue affects Booster Plus for WooCommerce: from n/a through 7.2.4...

7.1CVSS0.00228EPSS
SaveExploits0References1
CVE
CVE
•added 2025/05/16 3:45 p.m.•50 views

CVE-2025-48134

CVE-2025-48134 : Deserialization of untrusted data in the WordPress plugin WP Tabs (ShapedPlugin LLC) allows PHP Object Injection . Affected: WP Tabs &lt;= 2.2.11 (WordPress plugin offering responsive tabs and custom product tabs). The vulnerability origin is a deserialization flaw leading to obj...

7.2CVSS7.2AI score0.00482EPSS
SaveExploits0References1Affected Software1
Redos
Redos
•added 2025/05/13 12:00 a.m.•28 views

ROS-2-1

2.1 Notification on the update of the OPERATION SYSTEM "RED OS" MIS RED SOFT LLC notifies about renewal of the previously obtained certificate of conformity of FSTEC of Russia 4060 till 12.01.2029 of the operating system "RED OS", decimal number RU.29926343.02.01-01. You can contact the technical...

7.2AI score
SaveExploits0
Redos
Redos
•added 2025/05/13 12:00 a.m.•26 views

ROS-2-2

2.2 Notification of the update of the OPERATION SYSTEM "RED OS" MIS RED SOFT LLC notifies about renewal of the previously obtained certificate of conformity of FSTEC of Russia 4060 till 12.01.2029 of the operating system "RED OS", decimal number RU.29926343.02.01-01. You can contact the technical...

7.2AI score
SaveExploits0
Redos
Redos
•added 2025/05/13 12:00 a.m.•20 views

ROS-2-223

2.223 Notification on the update of the Red OS OPERATION SYSTEM MIS RED SOFT LLC notifies of the renewal of the previously obtained certificate of conformity of FSTEC of Russia №4060 until 12.01.2029 of the operating system "RED OS", decimal number RU.29926343.02.01-01. You can contact the...

7.3AI score
SaveExploits0
Patchstack
Patchstack
•added 2025/05/07 12:34 p.m.•19 views

WordPress Content Control plugin <= 2.6.1 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Content Control versions = 2.6.1...

6.5CVSS7.1AI score0.00262EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/07 12:00 a.m.•3 views

CVE-2025-47616: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kodezen LLC aBlocks ablocks allows Stored XSS.This issue affects aBlocks: from n/a through = 1.9.2...

6.5CVSS5.8AI score0.00262EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/04 4:43 p.m.•38 views

CVE-2023-53070

In the Linux kernel, the following vulnerability has been resolved: ACPI: PPTT: Fix to avoid sleep in the atomic context when PPTT is absent Commit 0c80f9e165f8 "ACPI: PPTT: Leave the table mapped for the runtime usage" enabled to map PPTT once on the first invocation of acpigetpptt and never...

5.5CVSS6.6AI score0.00199EPSS
SaveExploits0References4
Rows per page
Query Builder